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e This presentation provides guidance to authorized institutions (“Als”) on 
issues relating to their politically exposed person (“PEP”) & sanctions 
screening systems. The presentation is provided for training purposes and 
does not form part of the formal legal and regulatory requirements of the 
HKMA. It should not be substituted for seeking detailed advice on any specific 
case from an Al’s own professional adviser. 


e The HKMA is the owner of the copyright and any other rights in the 
PowerPoint materials of this presentation. These materials may be used for 
personal viewing purposes or for use within an Al. Such materials may not be 
reproduced for or distributed to third parties, or used for commercial 
purposes, without the HKMA’s prior written consent. 
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Overview 





e Geopolitical developments 

e Increasing complexity of sanctions 

e HK vulnerable to abuse as conduit for illicit funds 
e Response: 


e Sanctions compliance 
e Information and intelligence sharing 


Recent Initiatives 





e “Anti-Money Laundering / Counter-Terrorist Financing: United 
Nations Sanctions” — Jan 2018 


e “FATF Guidance on Counter-Proliferation Financing”; and 
discussion with stakeholders — March 2018 


e “Feedback from Thematic Reviews of Als’ Sanctions Screening 
systems”; providing industry guidance after thematic reviews — April 
2018 


Thematic Review - Background 





e During June 2017 the Hong Kong Monetary Authority (HKMA) conducted a Thematic 
Review of the automated sanction screening systems within the Hong Kong Authorised 
Institutions and global institutions with a physical presence in Hong Kong. 


e The HKMA appointed the service provider to assist in conducting the review to provide 
analysis, benchmark the results and provide feedback. 


e The HKMA's intention was to : 
v assess the effectiveness and efficiency of the Al’s screening system 
v facilitate remediation of the Al 
v To enable HKMA to assess sanction screening risk associated with each bank, giving 
them the ability to put in remedial plans, to ensure stability of the banking sector 


e A number of Als were included within the Thematic Review, with the overall process being 
carried out in 4 stages: 


‘Kick-Off’ Workshop 
Technical On-Boarding 
Test Execution 
Feedback Sessions 
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Testing Process — The Key Aims 





The aim of the HKMA Thematic Review has been to understand the effectiveness and efficiency of 
each of the financial institutions’ screening systems, with particular attention placed on five key 
considerations: 


1. Does the institution’s system generate an alert when an ‘un-manipulated’ sanctioned 
name is screened? 


Demonstrates ‘Pure’ match capability and the ‘completeness’ of sanction lists within the 
institution. 


2. Are the ‘fuzzy matching’ rules, configuration and threshold settings effective, such that 
a ‘manipulated’ sanctioned name generates an alert? 


Assesses how well individual matching rules are implemented and the ability of the screening 
system to generate an alert when a ‘minor’ manipulation is applied to a sanctioned name. 


Testing Process — The Key Aims 





Are the levels of ‘False Positives’ or ‘Noise’ within operable levels? 


When an alert/match is triggered, are the number of matches generated acceptable and 
operable within a BAU environment. 


Is the system performance in line with the institutions’ expectations and in line with 
‘peer’ performance? 


This ensures that the Regulator is confident that they understand the capability of each of the 
institutions screening systems (bank v bank) and, not only understand any weaknesses, but 
also have a clear understanding of any remediation steps that are required to maintain a 
consistent benchmark across both the Hong Kong jurisdiction and globally. 


Testing Process — The Key Aims 





5. Overall, what testing regime has been adopted/implemented and is it sufficient? 


Is any testing currently carried out? how frequent is it and is it of a sufficient level of granularity 
to provide confidence to the regulator? 


Expectations: Role of Senior Management 





e Should consider the risk of sanctions breaches and determine the 
appropriate level of sanctions screening to manage the risk 


e Demonstrate proven methodology for determining system 
settings and performance 


e Justify any deviations from group-wide policies 


e Role of Management Information 


Expectations: Testing on New Systems / Upgrades 





e Onus on the bank to demonstrate thorough testing and tuning 
before system deployment 


e System upgrades 


e Documentation of testing and analysis should be duly conducted 


Expectations: Frequent Ongoing Monitoring, Testing & 





Tuning 


e Adequate understanding of obligations under HK and other 
overseas sanctions regimes (as applicable) 


e Frequency of testing on system effectiveness and efficiency 
e Ongoing 


e Should result in an adequate understanding of system filter 
performance 


Expectations: Adequate Skills and Knowledge 





e Clear and demonstrable understanding of system filters employed 
in the institution’s screening technology 


e Employing and equipping staff with the skills and knowledge to 
support system deployment 


e Clarity around ownership and accountability of risk 


e Monitoring of suppression / good guy / white lists 


Expectations: Achieving System Effectiveness and 


Efficiency 





e Understanding the relationship between effectiveness and 
efficiency 


e Types of activity by which that is demonstrated 
e Monitoring levels of false positives 


e Demonstrating reasoning for rules or threshold changes 
implemented to deal with levels of false alerts 


e In line with the institution’s business requirements and risk 
appetite 


Next Steps - Expectations 





e Als are expected to: 


e Give consideration to adopting the good practices, where 
appropriate 


e gap analysis at a minimum 
e Putin place regular sanctions screening system testing 


e Information collection in Q3 2018; further review on a risk-based 
approach 


Concluding Remarks 





e Significant legal and reputational risk of operating ineffective 
sanctions screening systems 


e Cost of inefficient screening systems should not be 
underestimated 


e The objective of this exercise is to provide Als with the right 
information needed to optimize system performance 


e Regular system testing is vital for Als 


e Widely agreed upon, practiced by other regulators 
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